惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
WordPress大学
WordPress大学
N
Netflix TechBlog - Medium
宝玉的分享
宝玉的分享
V
Visual Studio Blog
S
Securelist
P
Palo Alto Networks Blog
A
Arctic Wolf
T
Tor Project blog
P
Proofpoint News Feed
I
InfoQ
博客园 - 三生石上(FineUI控件)
T
Threat Research - Cisco Blogs
G
GRAHAM CLULEY
M
MIT News - Artificial intelligence
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Microsoft Security Blog
Microsoft Security Blog
MongoDB | Blog
MongoDB | Blog
C
CXSECURITY Database RSS Feed - CXSecurity.com
Apple Machine Learning Research
Apple Machine Learning Research
S
Secure Thoughts
Cyberwarzone
Cyberwarzone
Blog — PlanetScale
Blog — PlanetScale
Simon Willison's Weblog
Simon Willison's Weblog
博客园 - 【当耐特】
大猫的无限游戏
大猫的无限游戏
腾讯CDC
Latest news
Latest news
Project Zero
Project Zero
V
Vulnerabilities – Threatpost
Y
Y Combinator Blog
S
SegmentFault 最新的问题
Schneier on Security
Schneier on Security
C
CERT Recently Published Vulnerability Notes
W
WeLiveSecurity
罗磊的独立博客
Stack Overflow Blog
Stack Overflow Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
L
LINUX DO - 热门话题
N
News and Events Feed by Topic
PCI Perspectives
PCI Perspectives
C
Cisco Blogs
Application and Cybersecurity Blog
Application and Cybersecurity Blog
爱范儿
爱范儿
T
The Exploit Database - CXSecurity.com
The Last Watchdog
The Last Watchdog
人人都是产品经理
人人都是产品经理
GbyAI
GbyAI
Know Your Adversary
Know Your Adversary
U
Unit 42

Sysdig Blog

Masterclass: AI is more than ChatGPT and LLMs CVE-2026-39987 update: How attackers weaponized marimo to deploy a blockchain botnet via HuggingFace Kubernetes 1.36 - New security features 5 steps to securing AI workloads Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours Security briefing: March 2026 The Sysdig MCP server is now available in AWS Marketplace Risk isn’t reduced until you take action: How teams resolve issues in the cloud AI infrastructure security: Why it deserves its own category Three pillars for building effective runtime-powered cloud defense, the right way Closing the cloud security gap with runtime security Seeing risk isn’t stopping it: Why visibility alone isn’t enough TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions AI coding agents are running on your machines — Do you know what they're doing? Runtime security for AI coding agents: Protecting AI-assisted development How runtime insights power every cloud security use case CVE-2026-33017: How attackers compromised Langflow AI pipelines in 20 hours Inline Cloud Response: Accelerating AWS threat containment for SOC teams Runtime malware detection for AWS Fargate Detecting CVE-2026-3288 & CVE-2026-24512: Ingress-nginx configuration injection vulnerabilities for Kubernetes Malware detection with Sysdig Security briefing: February 2026 Leveling up Kubernetes Posture: From baselines to risk-aware admission Eliminating runtime blind spots: How CleanStart and Sysdig build continuous trust across the container lifecycle LLMjacking: From Emerging Threat to Black Market Reality Real risks live at runtime: Why CISOs must care about deep telemetry in 2026 Sysdig named a Leader in the Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026 How to run rootless containers AI-assisted cloud intrusion achieves admin access in 8 minutes Security briefing: January 2026 Securing GPU-accelerated AI workloads in Oracle Kubernetes Engine Bringing OSS runtime security to AWS: Falco integration with AWS Security Hub CSPM Our customers have spoken: Sysdig rated a Strong Performer in Gartner® Voice of the Customer for Cloud-Native Application Protection Platforms Protecting sensitive business data in preparation for the organization's Gen AI VoidLink threat analysis: Sysdig discovers C2-compiled kernel rootkits AI is still a workload: A practical guide to securing AI workloads How threat actors are using self-hosted GitHub Actions runners as backdoors How Sysdig Sage delivers AI-powered, real-world vulnerability management Security briefing: December 2025 Top 10 ways to get breached in 2026 EtherRAT dissected: How a React2Shell implant delivers 5 payloads through blockchain C2 Introducing runtime file integrity monitoring and response with Sysdig FIM How to detect multi-stage attacks with runtime behavioral analytics EtherRAT: DPRK uses novel Ethereum implant in React2Shell attacks Detecting React2Shell: The maximum-severity RCE vulnerability affecting React Server Components and Next.js The rise of AI agents: How autonomous AI Is transforming cloud security Kubernetes 1.35 - New security features The Urgency of Securing AI Workloads for CISOs Security briefing: November 2025 Quantum and the cloud: Science fiction turned security strategy Cloud security, the right way: What the industry should demand (and why "good enough" isn't) Return of the Shai-Hulud worm affects over 25,000 GitHub repositories Detecting CVE-2024-1086: The decade-old Linux kernel vulnerability that’s being actively exploited in ransomware campaigns What’s old is new again: How to demystify AI security with AIBOMs Securing Kubernetes with agentic cloud security How agentic cloud security reduces real risks Hunting reverse shells: How the Sysdig Threat Research Team builds smarter detection rules Shifting left with AI and MCP: Sysdig + Amazon Q Developer How Falco and Stratoshark close the gap between open source runtime detection and deep forensic analysis Investigating security issues with ChatGPT and the GitHub MCP server New runc vulnerabilities allow container escape: CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 Harden your LLM security with OWASP Security briefing: October 2025 How agentic AI is changing cloud security Kubernetes Incident Response: Detect, investigate, and contain in under 10 minutes Sysdig recognized as a Cloud Security Leader in Latio Tech Cloud Security Market Report AI echolocation of cloud risks using Sysdig & Snyk MCP servers Sysdig MCP Server: Bridging AI and cloud security insights Understanding CVE-2025-49844: “RediShell” Critical Remote Code Execution in Redis How Sysdig secures your containers and Kubernetes Sysdig Security Briefing: September 2025 Cloud security, the right way: The 3 pillars of real-time defense Open source spotlight: Bringing web application security to Falco with Falcoya's Nginx plugin Malicious NPM packages: Are you exposed? AI for SOC teams: 5 cloud security prompts to start your day with Sysdig Sage™ Shai-Hulud: The novel self-replicating worm infecting hundreds of NPM packages ZynorRAT technical analysis: Reverse engineering a novel, Turkish Go-based RAT Modern vulnerability management, built for the cloud Build your AWS incident response playbook with open source tools 2025 Gartner® CNAPP Market Guide: Runtime visibility is no longer optional Threat hunting with Sysdig: Uncovering “IngressNightmare” Open source spotlight: From alerts to action with AI-powered Falco Vanguard From triage to action: How Sysdig’s agentic cloud security platform slashes noise and accelerates remediation The vision comes to life: Agentic cloud security with Sysdig Sage™ Data security findings: A technical deep dive Connecting runtime to source: Sysdig and Semgrep integration Fix what matters, faster: How Sysdig and Semgrep are unifying security without silos – from code to runtime Defending sensitive data with Sysdig Secure Redefining cloud security, the right way Join the movement: The Sysdig Open Source Community is live A smarter, safer cloud in the age of AI Unifying detection and response: Sysdig + Cortex XSOAR for security at cloud speed CVE-2025-53104: Command injection via GitHub Actions workflow in gluestack-ui Why MCP server security is critical for AI-driven enterprises What’s new in Sysdig — June 2025 AI-powered CNAPP with Sysdig Sage™ Revolutionizing Cybersecurity Search with Sysdig Sage™ Sysdig Threat Bulletin: Iranian Cyber Threats The end of the prioritization-only era: Vulnerability management needs action Dangerous by default: Insecure GitHub Actions found in MITRE, Splunk, and other open source repositories
The future of security is open, and it needs a unified hub: The Sysdig Open Source Community is here
2025-07-09 · via Sysdig Blog

The cloud evolution has shown no signs of slowing down, and the last few years have been no exception. AI utilization is exploding, with workloads using AI and machine learning packages growing by 500% in just one year. Not shockingly, the number of generative AI packages in use has more than doubled in that same time span. Container ephemerality is also accelerating with 60% of containers now living just 60 seconds or less, versus five minutes in 2019. This increase in speed and volume has major implications for security analysts, and the organizations they are tasked with protecting.

The security community has not been sitting by idly. In fact, many have invested heavily in open source security as their standard to combat the speed and volume of modern cloud environments and the multitude of threats they now face. Open source tools such as Wireshark, Stratoshark, sysdig OSS, and Falco are used by security organizations around the world to protect their infrastructure. Falco alone is leveraged by over 60% of the Fortune 500 to defend their cloud infrastructure from today’s advanced threats. 

Sysdig has always been led by our open source compass, delivering transparent and adaptable security powered by the community to solve real problems. 

Today we’re doubling down on our investment into open source by launching the Sysdig Open Source Community, a single hub where anyone working on any of the Sysdig open source projects — including Falco, Wireshark, Stratoshark, sysdig OSS, and more — can meet, learn, and build the future of security together.

Why we built it — and why now

A few months ago, a group of us scribbled a Sysdig open source project Venn diagram on a conference call while discussing all of the OSS projects Sysdig was supporting. Stratoshark was already stitching Falco runtime data to Wireshark-style packet insights, and sysdig OSS underpinned it all. When we overlaid our user bases on that sketch, the overlap was massive: Most practitioners juggle two or three of these tools every day. Very few people in the world have the luxury of a single tool that caters to every need within their role. We noticed that these folks were needing to constantly go to disparate forums, Slack channels, and meetups to make progress on projects, learn best practices, and try to connect the dots across these tools.  At the same time, the threat landscape has been accelerating, leaving teams struggling to keep up with their primary roles — and making time to innovate and grow a rarer luxury than ever. 

We landed on what we felt was an obvious conclusion: It’s time to break the silos, unite the tools, and empower the people to lift the community. The Sysdig Open Source Community answers that call.

One roof, multiple powerhouses

The Sysdig Open Source Community will house easy-to-navigate subcommunities that connect the right people at the right time to foster innovation and problem solve for the best possible security outcomes. 

Falco

Your one-stop shop for all things Falco and runtime security. Whether you’re iterating on a new plugin or learning how to deploy through Helm chart, the Falco community has you covered.  

Wireshark

Swim the wire to discuss and decode encrypted traffic patterns, post capture files, and trade deep-packet tips with the world’s foremost analysts.

Stratoshark

Dive into cloud-native packet analysis, troubleshoot strange flows, and engage with the engineers who built Stratoshark. 

sysdig OSS

Inspect what’s going on and what’s new for exploration and forensics across systems and container visibility. 

Whether you’re developing a brand-new plugin, getting your feet wet as a CS student, or asking your first “why is my rule noisy?” question, you’re welcome in the Sysdig Open Source Community.

A launchpad for today’s and tomorrow’s security leaders

Security doesn’t stop at your first Git commit, and neither do we at Sysdig. Beyond the technical categories, Sysdig wants to support you wherever you are on your journey:

Certification and skill pathways – The Sysdig Open Source Community offers seminars for important skills from Falco rule-writing to Wireshark forensics. Members gain a chance for prizes and access to structured courses and certifications that validate and enhance cloud-native skillsets.

Job and freelance board – The community has boards for community-submitted, curated job openings from companies that value open source security expertise, including full-time roles, contract gigs, and even opportunities to be a part of Sysdig.

Mentor matching – None of us made it here alone. This is a great opportunity to get guidance from seasoned pros or give back by mentoring newcomers.

Student support center – School is already hard enough. The community forum has a place for students to come and get the help they need to go above and beyond. Whether it’s issues with Wireshark projects or a capstone project with Falco, we have your back. 

Sysdig is focused on empowering the community by investing in the people, and making sure resources to lift yourself or someone else up are just one click away.

Built for everyone, powered by the community

This new OSS community is designed to be inclusive from day one. Tech-specific threads complemented by community lift categories mean there is space for more than troubleshooting. The community makes it easy to discover everything from “first-timer help” to “deep kernel wizardry” instead of combing through countless disorganized Slack threads. The threads in the communities will also evolve at the speed of open source tools, refreshing in real time and keeping answers and projects evergreen.

Contributing to the community is equally frictionless. Found a role that isn’t quite right for you, but could help out someone in the community? Post it to the Jobs & Freelance Board. Have skills that you want to keep sharp? Pass them on by teaching or mentoring folks just getting their feet wet. Have ideas that could help shape the future of the Sysdig open source ecosystem? Kick off a thread and get conversations rolling. 

Our commitment

Sysdig’s mission has always been to make every cloud deployment secure and reliable. With deep roots in open source, we believe the fastest path to that future is radical openness — sharing code, sharing context, and sharing credit. The Sysdig Open Source Community embodies that promise:

Empowering ecosystem – Engineers, analysts, hobbyists, and students under one roof.

OSS at the core – Falco, Wireshark, Stratoshark, sysdig OSS, and more continually improved by the people with a stake in the game.

Growth for all – Certifications, jobs, and mentorship that turn passion and curiosity into careers.

Come take your seat at the security table. Ask a question, answer one, or flex your newest work. If you pre-register before July 28th, 2025, you will be eligible for your pick of grand prize giveaways! The earlier you sign up, the better your odds. 

Sign up at https://community.sysdig.com/.

We hope to see you in the Sysdig Open Source Community — where open source minds are the future of security.